Privacy Policy UK GDPR Compliant

Summary - Plain English

PhotographyAttic sells second-hand camera gear we own. We only collect order details from PayPal/Stripe (name, email, address), messages you send, and anonymous analytics. We do not sell data or store card numbers.

Who is the Data Controller?

PhotographyAttic, Sheffield, UK.
Contact: Contact Form or

Information We Collect

• Order info – name, email, address from PayPal/Stripe
• Messages – via contact/feedback
• Analytics – Google Analytics anonymised

How We Use – Lawful Basis

• Contract – fulfil orders & warranty
• Legitimate Interest – reply, fraud prevention
• Legal Obligation – HMRC 6 years
• Consent – newsletter opt-in

Payments – PayPal & Stripe

All payments off-site, PCI compliant. We never see card numbers.

Cookies

Essential session, Analytics (_ga), PayPal/Stripe fraud, Twitter/Trustpilot. Block in browser but checkout may fail.

Your Rights Under UK GDPR

Access, Rectification, Erasure, Restrict, Object, Portability, Withdraw consent. Contact via form or – reply within 1 month. ICO complaint right.

Contacting Us

Questions? Contact PhotographyAttic or .